1. Who We Are
Athletik Clothing Inc. ("Athletik," "we," "us," or "our") is the organization responsible for the personal information described in this Privacy Policy.
- Data controller: Athletik Clothing Inc.
- Website: https://www.athletikapparel.com/
- Address: 228 Park Avenue S #30327, New York, NY 10003, United States
- Privacy email: [email protected]
This Privacy Policy applies when you visit our website, submit a manufacturing inquiry, communicate with us about that inquiry, or otherwise interact with the website. It does not apply to a third-party website or service that has its own privacy notice.
2. Information We Collect
2.1 Information You Provide
When you submit our inquiry form, we may collect:
- your name;
- business email address;
- company name;
- country;
- company website;
- product category of interest;
- estimated order quantity;
- business type; and
- the project details and other information you include in the message field, including a link to a tech pack if you choose to provide one.
Fields marked with an asterisk are required. If you do not provide the required information, we cannot receive or assess your inquiry through the form.
Please do not submit government identification numbers, payment-card information, health information, or other sensitive personal information through the inquiry form. If you provide personal information about another person, you are responsible for ensuring that you are authorized to do so.
2.2 Technical, Security, and Diagnostic Information
When you use the website or submit a form, our systems and service providers may automatically process technical information such as:
- IP address;
- browser type and version;
- device type and operating-system information;
- date and time of a request;
- requested page or source URL;
- referring page;
- form-submission status;
- email-delivery events; and
- security, anti-abuse, error, access, and diagnostic records.
This information is generated by WordPress, Fluent Forms, our hosting and content-delivery infrastructure, our consent platform, anti-abuse services, and our transactional email-delivery services. We use it to operate and secure the website, prevent abuse, deliver inquiries, investigate errors, and maintain service reliability.
2.3 Analytics and Campaign Attribution Information
If you consent to the relevant non-essential cookie category, Google Analytics 4 (GA4) may process online identifiers and information about how you reached and used the website, such as pages viewed, interactions, approximate location derived from technical signals, browser or device information, and referring source.
If you consent to marketing storage, our website may also retain the following campaign-attribution values for the current browser-tab session:
- UTM source, medium, campaign, content, and term;
- Google Click Identifier (GCLID), when present;
- first landing page; and
- original referrer.
Query strings and fragments are removed from stored landing-page and referrer URLs. If you submit an inquiry, the available attribution values may be saved with that inquiry so that we can understand which campaign generated it. If marketing consent is absent or withdrawn before submission, our local attribution storage and the related hidden form fields are cleared.
Google Ads conversion measurement is not active as of the draft date. If we activate it, we will first verify the applicable consent, disclosure, and opt-out requirements and update this Privacy Policy where necessary.
2.4 Consent Records
Cookiebot records your consent choices so that the website can remember them and so that we can demonstrate consent where required. These records may include a consent ID, consent state, date and time, and technical evidence associated with the consent event. Cookiebot states that IP information used in its consent evidence is anonymized.
3. How We Use Personal Information
We use personal information to:
- receive, review, and respond to manufacturing inquiries;
- assess whether a proposed project fits our products, capabilities, and order requirements;
- communicate about specifications, sampling, production, pricing, and next steps;
- prepare quotations and take steps requested before entering into a contract;
- manage customer, supplier, and business relationships;
- deliver form notifications and related email replies;
- operate, maintain, secure, and troubleshoot the website and form;
- prevent spam, fraud, abuse, and security incidents;
- understand website performance and visitor interactions when the required consent has been given;
- attribute inquiries to advertising or promotional campaigns when the required consent has been given;
- maintain records and establish, exercise, or defend legal claims; and
- comply with applicable legal, tax, accounting, regulatory, and contractual obligations.
We do not use inquiry information for marketing email campaigns unless we provide a separate notice and obtain any consent required by applicable law.
We do not use the information described in this Privacy Policy to make decisions based solely on automated processing that produce legal or similarly significant effects on an individual.
4. Legal Bases for Processing
Where the EU General Data Protection Regulation (GDPR), UK GDPR, Swiss data-protection law, or another law requiring a legal basis applies, we rely on one or more of the following bases:
- Steps before a contract or performance of a contract: to respond to a request for a quotation, assess a proposed manufacturing project, communicate about specifications, and perform an agreement with a customer.
- Legitimate interests: to operate a B2B manufacturing website, respond to professional inquiries, maintain business records, protect the website, prevent abuse, diagnose problems, and establish or defend legal claims. We consider the nature of the information, the context in which it was provided, and the effect of the processing on the individual.
- Consent: for non-essential analytics, campaign-attribution storage, advertising measurement, and other processing for which consent is required. You may withdraw consent at any time through the Cookie Settings control. Withdrawal does not affect processing that was lawful before withdrawal.
- Legal obligation: where processing is necessary to meet applicable legal, accounting, tax, regulatory, or compliance requirements.
Canadian personal information is handled for identified and reasonable business purposes and with consent where required by applicable Canadian privacy law.
5. Cookies and Similar Technologies
We use Cookiebot by Usercentrics to display consent choices and manage non-essential technologies. The banner provides equal access to rejection and acceptance choices and allows you to customize your selection.
The website may use the following categories:
- Necessary: required for core website, security, form, network, and consent functions. These technologies cannot be switched off through the consent banner.
- Preferences: remember optional choices or features.
- Statistics: help us understand website usage and performance, including GA4, when you consent.
- Marketing: support campaign attribution or advertising measurement when you consent and when those features are active.
Optional categories are off by default. You can accept all, reject all, or allow a selection. You can later change or withdraw your choice by opening the Cookie Settings control displayed on the website. Removing cookies directly from your browser may cause the consent banner to appear again.
The Cookie Declaration below is generated from Cookiebot's most recent website scan and provides details about the cookies and trackers currently identified on the website.
6. How We Disclose Personal Information
We disclose personal information only as reasonably necessary for the purposes described above, including to the following categories of recipients:
- Website and database hosting: Flywheel, a WP Engine service.
- DNS, content delivery, security, and email routing: Cloudflare.
- Website forms: WordPress and Fluent Forms within our hosted WordPress installation.
- Transactional email delivery: FluentSMTP and Brevo. Brevo delivers inquiry notifications but is not currently used as a marketing CRM for website visitors or inquiries.
- Destination email service: inquiry notifications routed through Cloudflare Email Routing are delivered to a 163.com mailbox, where inquiry emails and replies may be stored.
- Analytics and advertising measurement: Google services, including Google Analytics and, only if activated later, Google Ads conversion measurement.
- Consent management: Cookiebot by Usercentrics.
- Professional advisers and authorities: lawyers, accountants, insurers, regulators, courts, law-enforcement bodies, or other parties when reasonably necessary to comply with law, protect rights, or establish, exercise, or defend legal claims.
- Business transaction recipients: a prospective or actual buyer, investor, lender, adviser, or successor if we are involved in a merger, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal requirements.
We do not send website inquiries to an additional CRM, spreadsheet, WhatsApp account, mailbox, or sales platform under the current workflow.
Based on the current website configuration, we do not sell personal information for monetary consideration and do not use it for cross-context behavioral advertising. Non-essential analytics and any future advertising measurement remain subject to the consent controls described above.
7. International Data Transfers
Athletik Clothing Inc. is located in the United States. Our service providers and recipients may process personal information in the United States, the European Economic Area, the United Kingdom, the People's Republic of China, and other countries in which they or their subprocessors operate. The privacy laws in those countries may differ from the laws where you live.
Where applicable law restricts an international transfer, the transfer must be supported by an approved mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another legally permitted mechanism, together with supplementary measures where required. You may contact us to request information about the safeguards applicable to your personal information.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, dispute-resolution, and enforcement requirements. Current retention periods and controls are:
| Information | Current retention approach |
|---|---|
| Inquiry form submissions that do not become a customer relationship | 24 months after the last substantive contact, then deletion or anonymization |
| Inquiry notification emails and related replies that do not become a customer relationship | 24 months after the last substantive contact |
| Customer, contract, accounting, and tax records | For the period required by the applicable contract and legal obligations |
| GA4 user-level and event-level data | 14 months; reset on new activity is disabled |
| Browser-only UTM and GCLID attribution | The current browser-tab session; if submitted with an inquiry, the values follow the inquiry retention period |
| Cookiebot browser consent cookie | Up to 12 months |
| Cookiebot server-side consent evidence | For as long as reasonably necessary to demonstrate consent, meet applicable legal obligations, or handle legal claims, subject to Cookiebot's contractual deletion terms |
| Flywheel access, PHP error, and slow logs | The most recent 7 days |
| Flywheel website and database backups | Nightly backups retained for 30 days, then permanently deleted |
| Brevo transactional email logs | 1 month for all senders, followed by automatic deletion |
| Brevo transactional email content previews | Not stored for new transactional emails under the current account setting |
| Other operational, security, and diagnostic logs controlled by us | Target of 30 days unless a longer period is required for an active investigation, legal obligation, or claim |
Cloudflare's customer-visible product windows vary by feature. Under the site's current Free plan, the relevant dashboard or analytics windows range from 24 hours to 30 days for security events, security analytics, DNS analytics, Turnstile analytics, email-routing activity, and aggregated zone traffic. Cloudflare account audit logs for administrative and configuration activity are available for 18 months. These product access windows are not a single contractual deletion period for all Cloudflare network data, which Cloudflare processes under its own service terms and data-processing commitments.
Deletion from the live website does not always remove information immediately from a backup. A deleted record may remain in an isolated Flywheel backup until that backup reaches the end of its 30-day retention period, after which it is permanently deleted under the hosting service's backup process.
Google and other service providers may keep aggregated, de-identified, security, or legally required records for longer periods under their own terms. If Google Ads conversion measurement is activated, the related reporting data will be subject to Google's then-current product-retention rules.
9. Your Privacy Rights
Depending on where you live and which law applies, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of personal information;
- request restriction of processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time where processing is based on consent;
- request information about the categories of personal information collected, sources, purposes, and recipients;
- opt out of a sale or sharing of personal information, targeted advertising, or certain profiling, where those rights apply;
- limit certain uses of sensitive personal information, where applicable;
- appeal a refusal to act on a request, where applicable; and
- receive equal service and not be discriminated against for exercising an applicable privacy right.
These rights are not absolute. We may retain or continue to process information where permitted or required by law, including to complete a requested transaction, meet legal obligations, maintain security, or establish or defend legal claims.
To exercise a privacy right, email [email protected] and describe your request. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted by applicable law, but we may require proof of authorization and verification of the individual concerned. We will respond within the period required by applicable law.
Residents of the EEA, United Kingdom, or Switzerland may also complain to the data-protection authority in the country where they live or work, or where they believe an infringement occurred. Canadian individuals may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority. United States residents may contact their state attorney general or privacy regulator where applicable.
10. Security
We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include access controls, managed hosting and traffic-security services, anti-abuse controls, retention limits, and backup and recovery procedures appropriate to the website's current operation.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. If you believe information you provided to us has been compromised, please contact us promptly at [email protected].
11. Third-Party Links
The website may link to third-party services such as Instagram, YouTube, and WhatsApp. If you follow one of these links, the third party will process information under its own privacy notice and terms. We do not control the privacy practices of those external services and encourage you to review their notices before providing information.
12. Children's Privacy
This is a business-to-business manufacturing website and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided personal information through the website, contact us at [email protected] so that we can review and, where appropriate, delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the website, our service providers, our processing practices, or applicable law. We will post the revised policy on this page and change the "Last updated" date. Where required by law, we will provide additional notice or request consent before a material change takes effect.
14. Contact Us
For questions, privacy requests, or complaints about this Privacy Policy or our handling of personal information, contact:
Athletik Clothing Inc.
228 Park Avenue S #30327
New York, NY 10003
United States
Email: [email protected]